阅读:1429回复:0
windbg不会用,请大家指点
我修改了passthru,运行后dump,获得了dump文件后,用windbg分析,具体操作如下:
windbg是最新版本,下载的。symbol是service pack 2,从MSDN的光盘上来安装的。 打开windbg,设置symbol路径为C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb 其中第一个是系统symbol的安装路径,其余两个是我的passthru的路径。 source file路径设置如下:D:\\work\\sourcecode\\firewall\\0825\\passthru image file路径设置如下:D:\\work\\sourcecode\\firewall\\0825\\passthru, 然后打开dump文件,却无法显示出错的源码,为什么?windbg的提示信息如下: Symbol search path is: C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb WARNING: D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb is not accessible WARNING: D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb is not accessible Microsoft (R) Windows Debugger Version 6.2.0013.1 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [E:\\temp\\MEMORY.DMP] Kernel Dump File: Full address space is available Symbol search path is: C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb Executable search path is: D:\\work\\sourcecode\\firewall\\0825\\passthru *** WARNING: symbols timestamp is wrong 0x3d366b8b 0x384d9b17 for ntoskrnl.exe Windows 2000 Kernel Version 2195 (Service Pack 3) UP Free x86 compatible Product: Server, suite: Enterprise Kernel base = 0x804d1000 PsLoadedModuleList = 0x8053e9f0 Debug session time: Tue Aug 26 09:47:43 2003 System Uptime: 0 days 0:37:42.953 *** WARNING: symbols timestamp is wrong 0x3d366b8b 0x384d9b17 for ntoskrnl.exe Loading Kernel Symbols ............................................................................................................. Loading unloaded module list ............. Loading User Symbols ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D3, {ed2b4000, 2, 0, 804d2b78} *** ERROR: Symbol file could not be found. Defaulted to export symbols for NTice.SYS - *** WARNING: symbols timestamp is wrong 0x3cdaee06 0x38437eba for NDIS.sys *** ERROR: Module load completed but symbols could not be loaded for dlkfet.sys *** ERROR: Module load completed but symbols could not be loaded for ousbehci.sys *** WARNING: symbols timestamp is wrong 0x3c989e09 0x381f8c6e for halaacpi.dll *** ERROR: Module load completed but symbols could not be loaded for ousb2hub.sys Probably caused by : NTice.SYS ( NTice+23c10 ) Followup: MachineOwner --------- |
|